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Abstract 

The ability to exchange secret information is critical to many commercial, governmental, and 
military networks. The intrinsically secure communications graph (i6>-graph) is a random graph which 
describes the connections that can be securely established over a large-scale network, by exploiting 
the physical properties of the wireless medium. This paper aims to characterize the global properties 
of the i<S-graph in terms of: (i) percolation on the infinite plane, and (ii) full connectivity on a finite 
region. First, for the Poisson iS-graph defined on the infinite plane, the existence of a phase transition 
is proven, whereby an unbounded component of connected nodes suddenly arises as the density of 
legitimate nodes is increased. This shows that long-range secure communication is still possible in 
the presence of eavesdroppers. Second, full connectivity on a finite region of the Poisson iS-graph is 
considered. The exact asymptotic behavior of full connectivity in the limit of a large density of legitimate 
nodes is characterized. Then, simple, explicit expressions are derived in order to closely approximate 
the probability of full connectivity for a finite density of legitimate nodes. The results help clarify how 
the presence of eavesdroppers can compromise long-range secure communication. 

Index Terms 

Physical-layer security, wireless networks, stochastic geometry, percolation, connectivity. 

I. Introduction 

Contemporary security systems for wireless networks are based on cryptographic primitives 
that generally ignore two key factors: (a) the physical properties of the underlying communication 
channels, and (b) the spatial configuration of both the legitimate and malicious nodes. These two 
factors are important since they affect the propagation channels between the nodes, which in 
turn determine the fundamental secrecy potential of a wireless network. In fact, the randomness 
introduced both by the physics of the wireless medium and by the spatial location of the nodes 
can be leveraged to strengthen the overall security of the communications infrastructure Q 

The basis for information-theoretic security, which builds on the notion of perfect secrecy [QQ|, 
was laid in f2l and later in 0, H|. More recently, there has been a renewed interest in 

'in the literature, the term "security" typically encompasses 3 different characteristics: secrecy (or privacy), integrity, and 
authenticity. This paper does not consider the issues of integrity or authenticity, and the terms "secrecy" and "security" are used 
interchangeably. 
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information-theoretic security over wireless channels, from the perspective of space-time com- 
munications 0, multiple-input multiple-output communications 1161- lfTOll . eavesdropper collu- 
sion IfTTTl . lfT2l . cooperative relay networks [13], fading channels lfT4l - lfT8l . strong secrecy [fT9ll , 
[|20l , secret key agreement ll2T1l - ||25l , code design [|26l - ||28l , among other topics. A fundamental 
limitation of this literature is that it only considers scenarios with a small number of nodes. To ac- 
count for large-scale networks composed of multiple legitimate and eavesdropper nodes, secrecy 
graphs were introduced in ll29ll from a geometrical perspective, and in 113011 from an information- 
theoretic perspective. The local connectivity of secrecy graphs was extensively characterized in 
OTI . while the scaling laws of the secrecy capacity were presented in 11321 . Il33l . 

Percolation theory studies the existence of phase transitions in random graphs, whereby an 
infinite cluster of connected nodes suddenly arises as some system parameter is varied. Various 
percolation models have been considered in the literature. The Poisson Boolean model was 
introduced in ll34ll . which derived the first bounds on the critical density, and started the field of 
continuum percolation. The Poisson random connection model was introduced and analyzed in 
11351 . The Poisson nearest neighbour model was considered in |[36ll . The signal-to-interference- 
plus-noise ratio (SINR) model was characterized in lT37l . A comprehensive study of the various 
models and results in continuum percolation can be found in ll38ll . 

The connectivity of large but finite networks has also received attention the literature. The 
asymptotic behavior of partial connectivity of the Poisson Boolean model restricted to a finite 
box was studied in ll39l . The asymptotic full connectivity of the same model was analyzed in 
j|40l . iHTTl . which obtained the rate of growth of the radius that ensures full connectivity. The 
asymptotic full connectivity in finite nearest neighbour networks was considered in [|42l|. [|43l . 

In this paper, we characterize long-range secure connectivity in wireless networks by consid- 
ering the intrinsically secure communications graph (i5-graph) as defined in OTI . The 2iS-graph 
describes the connections that can be established with information-theoretic security over a large- 
scale network. We focus on percolation of the iiS-graph on the infinite plane, and full connectivity 
in a finite region. The main contributions of this paper are as follows: 

• Percolation in the iS-graph: We prove the existence of a phase transition in the Poisson 
2<S> -graph defined on the infinite plane, whereby an unbounded component of connected 
nodes suddenly arises as we increase the density of legitimate nodes. In particular, we 
determine for which combinations of system parameters does percolation occur. This shows 
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that long-range communication is still possible in a wireless network when a secrecy 
constraint is present. 

• Full connectivity in the iS -graph: We analyze secure full connectivity on a finite region of 
the Poisson ZiS-graph. We characterize the exact asymptotic behavior of full connectivity in 
the limit of a large density of legitimate nodes. Then, we obtain simple, explicit expressions 
that closely approximate the probability of full connectivity for a finite density of legitimate 
nodes. 

This paper is organized as follows. Section [II] describes the system model. Section [III] character- 
izes continuum percolation in the Poisson iiS-graph defined over the infinite plane. Section [IV] 
analyzes full connectivity in the Poisson ?5-graph restricted to a finite region. Section [V] con- 
cludes the paper and summarizes important findings. 

II. System Model 

We start by describing our system model and defining our measures of secrecy. The notation 
and symbols used throughout the paper are summarized in Table HI 

A. Wireless Propagation Characteristics 

In a wireless environment, the received power P TX (xi,Xj) associated with the link Xix] can 
modeled as 

-Frx(^i> •Ej) Pi ' 9\%i) -Ej > ^Xi,Xj): (1) 

where Pi is the (common) transmit power of the legitimate nodes; and g(xi,Xj, Z Xi>Xj ) is the 
power gain of the link XiXj, where the random variable (RV) Z Xi)Xj represents the random 
propagation effects (such as multipath fading or shadowing) associated with link XjXj. The 
channel gain g(x i7 Xj, Z XijX .) is considered constant (quasi-static) throughout the use of the 
communications channel, corresponding to channels with a large coherence time. The gain 
function is assumed to satisfy the following conditions, which are typically observed in practice: 

1) g(xi,Xj, Z XiiX .) depends on Xi and Xj only through the link length \xi — Xj\; with abuse 
of notation, we can write g(r,z) = g(xi, Xj, z)\\ Xi _ Xj \^ r . 

2) g(r, z) is continuous and strictly decreasing in r. 

3) Hindoo g(r, z) = 0. 
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The proposed model is general enough to account for common choices of g. One example is 
the unbounded model where g(r,z) = -§f. The term 4f accounts for the far- field path loss with 
distance, where the amplitude loss exponent b is environment-dependent and can approximately 
range from 0.8 (e.g., hallways inside buildings) to 4 (e.g., dense urban environments), with 6=1 
corresponding to free space propagation. This model is analytically convenient ll44l . but since 
the gain becomes unbounded as the distance approaches zero, it must be used with care for 
extremely dense networks. Another example is the bounded model where g(r, z) = 1+ ^ 2b . This 
model has the same far-field dependence as the unbounded model, but eliminates the singularity 
at the origin. Unfortunately, it often leads to intractable analytical results. The effect of the 
singularity at r = on the performance evaluation of a wireless system is considered in ll45l . 

B. Wireless Information-Theoretic Security 

We now define our measure of secrecy more precisely. While our main interest is targeted 
towards the behavior of large-scale networks, we briefly review the setup for a single legitimate 
link with a single eavesdropper. The results therein will serve as basis for the notion of iiS-graph 
to be established later. 

Consider the model depicted in Fig. [H where a legitimate user (Alice) wants to send messages 
to another user (Bob). Alice encodes a message s, represented by a discrete RV, into a codeword, 
represented by the complex random sequence of length n, x n = (x(l), . . . ,x(n)) E C n , for 
transmission over the channel. Bob observes the output of a discrete-time channel (the legitimate 
channel), which at time i is given by 

y t (i) = hi ■ x(i) + rii(i), \<i< n, 

where hi G C is the quasi-static amplitude gain of the legitimate channel^] and ~ A/" c (0, of) 
is AWGN with power erf per complex sample^ Bob makes a decision s on s based on the 
output yt, incurring in an error probability equal to F{si ^ s}. A third party (Eve) is also 

2 The amplitude gain he can be related to the power gain in (0 as g{ri,Zi) = \hi\ 2 , where ri and Zi are, respectively, the 
length and random propagation effects of the legitimate link. 

3 We use A/" c (0, a 2 ) to denote a circularly symmetric (CS) complex Gaussian distribution, where the real and imaginary parts 
are IID Af(0,a 2 /2). 
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capable of eavesdropping on Alice's transmissions. Eve observes the output of a discrete-time 
channel (the eavesdropper's channel), which at time i is given by 

y e (i) = h c ■ x(i) + n c (i), 1 < i < n, 

where h c G C is the quasi-static amplitude gain of the eavesdropper channel, and n c [i) ~ 
jV c (0,<7e) is AWGN with power of per complex sample. It is assumed that the signals x, 
h e , n e , and n c are mutually independent. Each codeword transmitted by Alice is subject to the 
average power constraint of P e per complex symbol, i.e., 

1 - 

-VE{|^)| 2 }<^. (2) 

n 

i=i 

We define the rate of transmission as 

n 

where H(-) denotes the entropy function. 

Throughout the paper, we use strong secrecy as the condition for information-theoretic security, 
and define it as follows lfT9l . 

Definition 2.1 (Strong Secrecy): The rate ^* is said to be achievable with strong secrecy if 
Ve > 0, for sufficiently large n, there exists an encoder-decoder pair with rate ^ satisfying the 
following conditions: 

%. > C - e, 
H(s\y:) > H(s) - e, 
F{s e ^s}<e. 

We define the maximum secrecy rate (MSR) ^ of the legitimate channel to be the maximum 
rate HC that is achievable with strong secrecyQ If the legitimate link operates at a rate below 
the MSR there exists an encoder-decoder pair such that the eavesdropper is unable to obtain 
additional information about s from the observation y", in the sense that H(s\y™) approaches 

4 See 1201 for a comparison between the concepts of weak and strong secrecy. In the case of Gaussian noise, the MSR is the 
same under the weak and strong secrecy conditions. 
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H(s) as the codeword length n grows. It was shown in [|4]|, IfTTl that for a given realization of 
the channel gains he, h e , the MSR of the Gaussian wiretap channel is 



P e -\h e \ 2 \ , / Pf\hA 

log 2 1 + 5 ~ l0 £2 1 ' 



(3) 



in bits per complex dimension, where [x] = max{z, 0}@ In the next sections, we use these basic 
results to analyze secrecy in large-scale networks. 

C. iS -Graph 

Consider a wireless network where the legitimate nodes and the potential eavesdroppers are 
randomly scattered in space, according to some point processes. The 2iS>-graph is a convenient 
representation of the information-theoretically secure links that can be established on such 
network. In the following, we introduce a precise definition of the iS-graph, based on the notion 
of strong secrecy. 

Definition 2.2 (iS-Graph 071/ ): Let n.£ = {xi}^Z 1 C M. d denote the set of legitimate nodes, 
and il e = {e;}^ C M. d denote the set of eavesdroppers. The iS-graph is the directed graph G = 
{He, £} with vertex set Ug and edge set 

£ = {x~Xj : !Ks(xi, Xj) > q}, (4) 

where q is a threshold representing the prescribed infimum secrecy rate for each communication 
link; and ^(xj, Xj) is the MSR, for a given realization of the channel gains, of the link between 
the transmitter Xi and the receiver Xj, given by 

with 



g 2 1 + ~ l0 §2 I 1 + 



"2 1U &2 1 1 o 

erf J V a 1 



e 



(5) 



e* = argmax F rx (xj, e fc ). (6) 
e fe en e 

This definition presupposes that the eavesdroppers are not allowed to collude (i.e., they cannot 
exchange or combine information), and therefore only the eavesdropper with the strongest 

5 Operationally, the MSR ^ can be achieved if Alice first estimates hi and h c (i.e., has full CSI), and then uses a code that 
achieves MSR in the AWGN channel. Estimation of h c is possible, for instance, when Eve is another active user in the wireless 
network, so that Alice can estimate the eavesdropper's channel during Eve's transmissions. As we shall see, the i5-graph model 
presented in this paper relies on an outage formulation, and therefore does not require assumptions concerning availability of 
full CSI. 
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received signal from X{ determines the MSR between x^ and xj. The effect of eavesdropper 
collusion on the local connectivity of the 2iS>-graph is analyzed in PTTl . 

The iiS-graph admits an outage interpretation, in the sense that legitimate nodes set a target 
secrecy rate g at which they transmit without knowing the channel state information (CSI) of 
the legitimate nodes and eavesdroppers. In this context, an edge between two nodes signifies 
that the corresponding channel is not in secrecy outage. 

In the remainder of the paper, we consider the case where the following conditions hold: 
(a) the wireless environment introduces only path loss, i.e., Z XuXj = 1 in (QQ); and (b) the noise 
powers of the legitimate users and eavesdroppers are equal, i.e., erf = a\ = a 2 . In such case, 
we can combine (0Q), ©, and © to obtain the following edge self] 

£ = lx~Xj : g(\xi - Xj\) > 2 e g(\xi - e*|) + — {2 e - 1), e* = argmin \x d - e k \ \, (7) 

where e* denotes the eavesdropper closest to the transmitter 2j. The particular case of g = 
corresponds to considering the existence of secure links, in the sense that an edge Xix] is present 
iff %s(xi,Xj) > 0. Thus, a positive (but possibly small) rate exists at which Xi can transmit to 
Xj with information-theoretic security. In this case, the edge set in CO) simplifies to 

£ — \ Xix] : \xi — Xj\ < \xi — e*|, e* = argmin \xi — e/t| >, (8) 

which corresponds to the geometrical model proposed in ||29ll . Fig. |2(a)| shows an example of 
such an iS- graph on M 2 . 

The spatial location of the legitimate and eavesdropper nodes can be modeled either determin- 
istically or stochastically. In many important scenarios, only a statistical description of the node 
positions is available, and thus a stochastic spatial model is more suitable. In particular, when 
the node positions are unknown to the network designer a priori, we may as well treat them 
as completely random according to a homogeneous Poisson point process ll46l Fl The Poisson 
process has maximum entropy among all homogeneous processes [|47l . and serves as a simple 
and useful model for the position of nodes in a network p4l|. Il48~l . 



6 For notational simplicity, when Z = 1, we omit the second argument of the function g(r, z) and simply use g(r). 
7 The spatial Poisson process is a natural choice in such situation because, given that a node is inside a region TZ, the PDF of 
its position is conditionally uniform over TZ. 
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Definition 2.3 (Poisson iS-graph): The Poisson iS-graph is an 2iS-graph where n £ , Il e C M. d 
are mutually independent, homogeneous Poisson point processes with densities X e and A e , 
respectively. 

In the remainder of the paper (unless otherwise indicated), we focus on Poisson ?'5-graphs on 
R 2 . 

III. Percolation in the Poisson i<S-GRAPH 

Percolation theory studies the behaviour of the connected components in random graphs. 
Typically, a continuum percolation model consists of an underlying point process defined on the 
infinite plane, and a rule that describes how connections are established between the nodes 081 . A 
main property of all percolation models is that they exhibit a phase transition as some continuous 
parameter is varied. If this parameter is the density A of nodes, then the phase transition occurs 
at some critical density A c . When A < A c , denoted as the subcritical phase, all the clusters 
are a.s. bounded^ When A > A c , denoted as the supercritical phase, the graph exhibits a.s. an 
unbounded cluster of nodes, or in other words, the graph percolates. 

Percolation theory plays an important role in the study of connectivity in multi-hop wireless 
networks, where the formation of an infinite component of connected nodes is desirable for 
communication over arbitrarily long distances. In the literature, percolation — and therefore long- 
range communication — was shown to occur in the following models, all of them driven by a 
Poisson point process: 

1) Boolean model 04l . where two nodes are directly connected iff their distance is smaller 
than a fixed radius r. This can be used to model unsecured communication subject to a 
minimum received signal-to-noise ratio (SNR), in the absence of fading. 

2) Random connection model 051 . where each pair of nodes is directly connected with some 
probability p(r) depending only on their distance r, and independently of every other pair. 
This can be used to model unsecured communication in the presence of fading, subject to 
a minimum received SNR. 

3) SINR model 071 . where two nodes are directly connected if the SINR exceeds the same 
threshold at both ends. This can be used to model unsecured communication subject to a 

8 We say that an event occurs "almost surely" (a.s.) if its probability is equal to one. 
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minimum received SINR, in the absence of fading. 
4) Nearest neighbour model |[36ll . where each node connects to its k nearest neighbours. This 

can be used to model unsecured communication in a centralized network where a power 

control scheme ensures connectivity to the A; nearest nodes only. 
In this section, we focus on the ZiS-graph model, and show that long-range communication with 
information-theoretic security is feasible in the presence of eavesdroppers. The mathematical 
characterization of the iS-graph presents two challenges: i) unlike the models 1-4 above, the 
iiS-graph is a directed graph, which leads to the study of directed percolation; and ii) similarly to 
models 3 and 4, the ZiS-graph exhibits dependencies between the state of different edges, which 
leads to the study of dependent percolation. 

In what follows, we start by introducing some definitions, then present and prove the main 
theorem concerning percolation in the z5-graph, and lastly illustrate the percolation phenomenon 
with various simulation results. The study of full connectivity in the iiS-graph over a finite domain 
(as opposed to percolation in the infinite plane) is also of interest, and is considered in Section HVl 

A. Definitions 

Graphs: As before, we use G = {Hi,£} to denote the (directed) z<S-graph with vertex 
set II^ and edge set given in §4§. In addition, we define two undirected graphs: the weak 
iS-graph G wcak = {i^,£ wcak } , where 

£ wcak = {x~x- : ^{Xi, xj) > q V ^(Xj, Xi ) > q}, 

and the strong iS-graph G strons = {U e ,S stmng }, where 

^strong = . Xj ) > g A H^( Xj ,Xi) > Q}. 

The graph G wcak represents the links where secure unidirectional communication is possible 
with an MSR greater than q. The graph C stron g ? on the other hand, represents the links where 
secure bidirectional communication is possible with an MSR greater than g. The various types 
of i<S-graphs are illustrated in Fig. [2l 

Graph Components: While the notion of "component" is unambiguous in undirected graphs, 
some subtleties arise in directed graphs. Specifically, the notion of component is not clear in 
a directed graph, because even if node x can reach y through a sequence of directed edges, 
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that does not imply that y can reach x. We can, however, generalize the notion of component 
associated with undirected graphs by defining 4 different graph components for the iS -graph. 

Q 

In what follows, we use the notation x — > y to represent a path from node x to node y in a 
directed graph G, and x — y to represent a path between node x and node y in an undirected 
graph G*. Let the out-component /C out (x) of node x be the set of nodes which can be reached 
from node x in the iiS-graph G, i.e., 

K™\x)±{yeIL e :3x^y}. (9) 

Similarly, let the in-component )C m of node x be the set of nodes from which node x can be 
reached in the ZiS-graph G, i.e., 

r(x)^{ 2/ en,:3 !/ 4x}. (io) 

Let the weak component /C weak (x) be the set of nodes which are connected to node x in the 
weak ZiS-graph G wcak , i.e., 

lC^(x)^{yeU e :3x G - y}. (11) 

Let the strong component /C strong (x) be the set of nodes which are connected to node x in the 
strong ?<S-graph G stIong , i.e., 

JC st ™*(x) ± {y en £ :3x G - B y}. (12) 

From these definitions, it is clear that for a given realization of ILj and n e the following properties 
hold for any x: 

/C strong (x) C /C out (x) C /C weak (x), (13) 
/C strong (x) C V n (x) C /C wcak (x), (14) 

i 



These properties are illustrated in Fig. 9(c) 



9 In the literature, the weak and strong components of node x are sometimes defined differently as 

K wclk (j;) ^{j/en:3x-4yV3y4x} = fC out (x) U fC in (x), 

and 

^strong ( x )A{ ye il:Jx^yA3y^x} = !C out (x)nlC in (x). 

In this paper, we prefer the definitions in Jilt and J 1 2b . since they only depend on the respective undirected graphs (J wcak and 
G strong , and do not require explicit knowledge of G. As we shall see, this choice will simplify many of the derivations, namely 
by allowing us to translate an analysis of directed graphs into one of undirected graphs. 



12 



Percolation Probabilities: To study the percolation in the iiS-graph, it is useful to define 
percolation probabilities associated with the four graph components. Such probabilities depend 
on the MSR threshold q, and the node densities X e and A e . Specifically, let p^, p™, p™ eak , and 
P s ^ ong respectively be the probabilities that the in, out, weak, and strong components containing 
node x = have an infinite number of nodes, i.e.0 

^(A,,Ae,£)^P{|/C>(0)|=oo}, 

where o G {out, in, weak, strong} j^J Our goal is to study the properties and behavior of these 
percolation probabilities. 

B. Main Result 

We now investigate the percolation phenomenon in the iiS-graph. Specifically, we aim to 
determine if percolation in the ZiS-graph is possible, and if so, for which combinations of system 
parameters (A^, A e , q) does it occur. The result is given by the following main theorem. 

Theorem 3.1 (Phase Transition in the iS-Graph): For any A e > and q satisfying 



< q < fw = log 2 ( 1 + ) , (15) 



there exist critical densities A° ut , Aj, n , A™ eak , Af rong satisfying 



< A™ c < A° ut < Af rong < oo (16) 

< A^ cak < A™ < Af ong < oo (17) 

such that 

pl o = 0, for X e < XI, (18) 

> 0, for A, > A^, (19) 

for any o e {out, in, weak, strong}. Conversely, if q > g max , then p^ = for any Xe, A e . 
To prove the theorem, we introduce the following three lemmas. 

10 We condition on the event that a legitimate node is located at x = 0. According to Slivnyak's theorem 1491 Sec. 4.4], apart 
from the given point at x = 0, the probabilistic structure of the conditioned process is identical to that of the original process. 

"Except where otherwise indicated, in the rest of the paper we use the symbol o to represent the out, in, weak, or strong 
component. 
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Lemma 3.1: For any A e > and g satisfying (fTSb . there exists an e > such that p^^iXe) = 
for all X e < e. 

Proof: Due to its length, the proof is postponed to Section IIII-CI □ 
Lemma 3.2: For any A e > and g satisfying (TT5T) . there exists a ( < oo such that p s ^ ong (Xe) > 
for all X e > (. 

Proof: Due to its length, the proof is postponed to Section IIII-DI □ 
Lemma 3.3: For any A e > and g > 0, the percolation probability p^Xe) is a non-decreasing 
function of A^. 

Proof: See Appendix lAl □ 

With these lemmas we are now in condition to prove Theorem 13 . 1 1 

Proof of Theorem |X7]' We first show that if g > g max , then p^ = 0. The MSR ^ of a 
link Xix], given in ©, is upper bounded by the channel capacity ^ of a link with zero length, 
i.e., %,(xi,Xj) < ^(xi,Xi) = log 2 ^1 + P 'ffl j . If the threshold g is set such that g > g max , 
the condition ^(xi,Xj) > g in © for the existence of the edge Xix] is never satisfied by 
any Xi,Xj. Thus, the ?iS-graph G has no edges and cannot percolate. We now consider the 
case of < g < g max . From properties (fT3l) and (fl4l) . we have p s ^ ong < p^ < p^ eak and 
^strong < p m < ^wcak Then ^ Lemmas [3Tl (3^ and [33] imply that each curve p^Xi) departs 
from the zero value at some critical density A^, as expressed by (fT8l) and ( fT9l ). Furthermore, 
these critical densities are nontrivial in the sense that < A^ < oo. The ordering of critical 
densities in (fT6l) and (fT7l) follows from similar coupling arguments. □ 

We now present some remarks on Theorem 13.11 The theorem shows that each of the four 
components of the ZiS-graph experiences a phase transition at some critical density A^. These 
critical densities are nontrivial, in the sense that < A* < oo. As we increase the density 
of legitimate nodes, the component /C weak (0) percolates first, then /C out (0) or /C m (0), and finally 
/C strong (0). Furthermore, percolation can occur for any prescribed infimum secrecy rate g, as 
long as it is below the channel capacity of a link with zero length, i.e., £ max . This has different 
implications depending on the type of path loss model, as presented in Section III-AI 

. If g(0) = oo, percolation can occur for any arbitrarily large secrecy requirement g, as long 
as the density of legitimate nodes is made large enough. 

• If g(0) < oo, percolation cannot occur if the threshold g is set above g max = log 2 (1 + SNR • g(0)), 
where SNR = To ensure percolation for such g, the signal-to-noise-ratio SNR must be 
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increased until £? max (SNR) decreases below the desired g. At that point, the density X e can 

then be increased to achieve percolation. 
Note that the theorem holds for any channel gain function g(r) satisfying Conditions 1-3 in 
Section III-AL including bounded and unbounded models. Concerning the density A e of eaves- 
droppers, the theorem says that as long as g < g max , percolation can occur even in scenarios 
with arbitrarily dense eavesdroppers. This can be achieved just by deploying more legitimate 
nodes, so that A^ is large enough. 

Operationally, the theorem is important because it shows that long-range secure communication 
over multiple hops is still feasible, even in the presence of arbitrarily dense eavesdroppers. In 
particular, if we limit communication to the secure links whose MSR exceeds g (chosen such 
that g < g max ), then for A^ large enough, a component with an infinite number of securely- 
connected nodes arises. Those nodes are able to communicate with strong secrecy (in the sense 
of Definition 12 .11) . at a rate greater than g bits per complex channel use. The specific type of the 
secure connection (e.g., unidirectional or bidirectional) depends on the graph component under 
consideration: out, in, weak, or strong component. 

C. Proof of Lemma I3.il 

In this section, we introduce a few definitions and propositions, which are then used to prove 
the lemma. Note that the graph G weak (g) depends on g, and it is sufficient to show that G weak (g) 
for the case of g = does not percolate for sufficiently small A^. This is because for larger g 
the connectivity of G wcak (g) is worse and thus G wcak (g) certainly does not percolate either. We 
then proceed in two intermediate steps. First, we map the continuous ZiS-graph G onto a discrete 
hexagonal lattice and declare a face in Ch to be closed in such a way that the absence of 
face percolation in £ h implies the absence of continuum percolation in G wcak . Second, we show 
that discrete face percolation does not occur in £ h for sufficiently small (but nonzero) A^. The 
details are presented next. 

1) Mapping on a Lattice: We start with some definitions. Let be an hexagonal lattice as 
depicted in Fig. [3j where each face is a regular hexagon with side length 5. Each face has a 
state, which can be either open or closed. A set of faces (e.g., a path or a circuit) in C h is said 
to be open iff all the faces that form the set are open. We now define when a face is closed 
based on how the processes He and n e behave inside that face. 
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Definition 3.1 (Closed Face in C h ): A face % in £ h is said to be closed iff all the following 
conditions are met: 

1) Each of the 6 equilateral triangles {7j}f =1 that compose the hexagon H has at least one 
eavesdropper. 

2) The hexagon H is free of legitimate nodes. 

The above definition was chosen such that discrete face percolation in C\ x can be tied to 
continuum percolation in G wcak , as given by the following proposition. 

Proposition 3.1 (Circuit Coupling): If there exists a closed circuit in C h surrounding the 
origin, then the component /C wcak (0) is finite. 

Proof: Assume there is a closed circuit C in £ ft surrounding the origin, as depicted in Fig.|4] 
This implies that the open component in £ h containing 0, denoted by /C £h (0), must be finite. 
Since the area of the region /C £h (0) is finite, the continuous graph G wcak has a finite number of 
vertices falling inside this region. Thus, to prove that /C wcak (0) is finite, we just need to show 
that no edges of G wcak cross the circuit C. Consider Fig. [3l and suppose that the shaded faces 
are part of the closed circuit C. Let x 1: x 2 be two legitimate nodes such that x\ falls on an 
open face on the inner side of C, while x 2 falls on the outer side of C (note that Definition l3.il 
specifies that the closed faces in C cannot contain legitimate nodes). Clearly, the most favorable 
situation for x\ , x 2 being able to establish an edge across C is the one depicted in Fig. [3] The 
edge X\X 2 exists in G weak iff either B Xl (S) or B X2 (5) are free of eavesdroppers o This condition 
does not hold, since Definition 13.11 guarantees that at least one eavesdropper is located inside 
the triangle 71 C B X1 (5) fl B X2 (5). Thus, no edges of G wcak cross the circuit C, which implies 
that /C wcak (0) has finite size. □ 

2) Discrete Percolation: Having performed an appropriate mapping from a continuous to a 
discrete model, we now analyze discrete face percolation in C h . 

Proposition 3.2 (Discrete Percolation in £ h J; If the parameters A^, A e , 5 satisfy 

(l-e"^ 2 ) 6 -e-^ 2 >^, (20) 

then the origin is a.s. surrounded by a closed circuit in C h . 

Proof: According to Definition 13.11 the state of a face H in £ h does not depend on the 
behaviour of the processes and n e outside H. Because the processes are Poisson, the state of 

12 We use B x (p) — {y £ R 2 : \y — x\ < p} to denote the closed two-dimensional ball centered at point x, with radius p. 
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different faces is then independent. Then, the model introduced in Section ITlI-C 1 1 can be seen as 
a face percolation model on the hexagonal lattice C^, where each face is closed independently 
of other faces with probability 

p = P{face H of £h is closed} 



pH/\n e {7l} > lj An e {n} 



l-e-^T-e- A ^ 2 , (21) 



where we used the independence between the processes Hi and n e , and the fact that A{%} = 
^S 2 and A{"H} = ^^-5 2 . Face percolation on the hexagonal lattice can be equivalently described 
as site percolation on the triangular lattice. In particular, recall that if 

F{H is open} < -, (22) 



then the open component in containing the origin is a.s. finite 11501 Ch. 5, Thm. 8], and so the 
origin is a.s. surrounded by a closed circuit in £ h - Combining (f2T|) and ((22|) . we obtain d20l) . □ 
We now use the propositions to finalize the proof of Lemma [3TT~l whereby p^ ak (A^) = for 
sufficiently small (but nonzero) A^. 

Proof of Lemma \3J\ For any fixed A e , it is easy to see that condition (|20l) can always be met 
by making the hexagon side 5 large enough, and the density X e small enough (but nonzero). For 
any such choice of parameters A^, A e , 5 satisfying (l20l) . the origin is a.s. surrounded by a closed 
circuit in Ch (by Proposition [321), an d the component /C wcak (0) is a.s. finite (by Proposition 13 .11) . 
i.e., p™ cak (A,) = 0. □ 



D. Proof of Lemma 13.21 

In this section, we introduce a few definitions and propositions, which are then used to prove 
the lemma. We proceed in two intermediate steps. First, we associate with our continuous 
i5-graph G a discrete square lattice £ s as well as its dual C' s , and declare an edge in C s to 
be open in such a way that discrete edge percolation in C' s implies continuum percolation in 
^strong Second, we show that discrete edge percolation occurs in C' s for sufficiently large (but 
finite) X t . The details are presented next. 
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1) Mapping on a Lattice: We start with some definitions. Let C s = d- Z 2 be a square lattice 
with edge length d. Let C' s be the dual lattice of C s , constructed by placing a vertex in the 
center of every square of £ s , and placing an edge a' across every edge a of C s . Since C s is a 
square lattice, it is clear that C' s = C a + (|, |), as depicted in Fig. \5\ We make the origin of the 
coordinate system coincide with a vertex of C s . Each edge has a state, which can be either open 
or closed. We declare an edge a' of C' s to be open iff its dual edge a in £ s is open. Furthermore, 
a set of edges (e.g., a path or a circuit) in £ s or C' s is said to be open iff all the edges that form 
the set are open. 

We now specify when an edge of C s (and therefore of C' s ) is open based on how the 
processes IL and n e behave in the neighborhood of that edge. Consider Fig. |6l where a denotes 
an edge in C s , and Si(a) and <S 2 (a) denote the two squares adjacent to a. Let {vi}f =1 denote 
the four vertices of the rectangle S±(a) U <S 2 (a). We then have the following definition. 

Definition 3.2 (Open Edge in C s ): An edge a in C s is said to be open iff all the following 
conditions are met: 

1) Each square «Si(a) and <S 2 (a) adjacent to a has at least one legitimate node. 

2) The region Z(a) is free of eavesdroppers, where Z(a) is smallest rectangle such that 







Ui=l^( r free) C Z(o) with 

'"free = 9 



A - 1 ( 2 ^(v / 5d)-^(l-2^)). (23) 



The above definition was chosen such that discrete edge percolation in C' s can be tied to 
continuum percolation in G stToag , as given by the following two propositions. 

Proposition 3.3 (Two-Square Coupling): If a is an open edge in C s , then all legitimate nodes 
inside Si(a) U 52 (a) form a single connected component in G strong . 

Proof: If two legitimate nodes Xi,x 2 are to be placed inside the region 5i(a) U <S 2 (a), 
the most unfavorable configuration in terms of MSR is the one where the distance \x± — x%\ is 
maximized, i.e., Xx, x 2 are on opposite corners of the rectangle 5i(a)UiS 2 (a) and thus \x±— x 2 \ = 
y/5d. In such configuration, we see from © that the edge x\x 2 exists in G iff g(\xi — xj\) > 
2 e g(\xi — e*|) + ^(2 B — 1), where e* is the eavesdropper closest to X\. This is equivalent to 

13 To ensure that r-f rcc in d23 b is well-defined, in the rest of the paper we assume that d is chosen such that d < 
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requiring that 



(2 
2~ e g(V5d)-y(l-2- 



'"freej 



which is a well-defined quantity if d is chosen such that d < ^g^ 1 (^r(2 e — 1)V As a result, 
the edge Xix 2 exists in G stmng iff both B Xl (r iree ) and £>.j; 2 (rf ree ) are free of eavesdroppers. Now, 
if Z(a) is the smallest rectangle containing the region Ui=i ^( r free) 5 where are the vertices 
of Si(a) U «S 2 (a), then the condition U e {Z(a)} = ensures the edge x^x] exists in G stIong for 
any Xi,Xj E «Si(a) U ^(a), and thus all legitimate nodes inside «Si(a) U ^(a) form a single 
connected component in C stron g. □ 

Proposition 3.4 (Component Coupling): If the open component in C' s containing the origin is 
infinite, then the component /C strong (0) is also infinite. 

Proof: Consider Fig. |7J Let V = {a-} denote a path of open edges {a-} in C' s . By the 
definition of dual lattice, the path V uniquely defines a sequence S = {Si} of adjacent squares 
in £ s , separated by open edges {aj} (the duals of {<%[}). Then, each square in S has at least one 
legitimate node (by Definition 13.21) . and all legitimate nodes falling inside the region associated 
with S form a single connected component in G strong (by Proposition 13.31) . Now, let JC c ' s (0) 
denote the open component in C' s containing 0, i.e., the set of vertexes in C' s that are connected 
to by some path. Because of the argument just presented, we have |/C £ =(0)| < |/C strong (0)|. 
Thus, if |/C £ =(0)| = oo, then |/C strong (0)| = oo. □ 

2) Discrete Percolation: Having performed an appropriate mapping from a continuous to a 
discrete model, we now analyze discrete edge percolation in C' s . Let N s be the number of squares 
that compose the rectangle Z(a) introduced in Definition 13.21 We first study the behavior of 
paths in C s with the following proposition. 

Proposition 3.5 (Geometric Bound): The probability that a given path of C s with length n is 
closed is bounded by 

P{path of £ s with length n is closed} < q n/N % (24) 
where N c is a finite integer and 

g = l-(l-e- A ^ 2 ) 2 -e~ Ac7Vsd2 (25) 
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is the probability that an edge of C s is closed. 
Proof: Using Definition 13.21 we can write 



q = P{edge a of C s is closed} 

= 1 - P{n^{<S 1 (o)} > 1 A U e {S 2 (a)} > 1 A U e {Z(a)} = 0} 
= i _ (1 _ e -W)2 . e -W^ 

where we used the properties of the independent processes 11^ and Il e . This is the result in (|25l ). 
Now, letting P = {flj}™ =1 denote a path of jC s with length n and edges {a,;}, we wish to obtain 
an upper bound on P{P is closed}. Considering two edges dj, Oj G P, the states of these edges 
are statistically independent iff 

Z(oi) n Ziflj) = 0. (26) 

We consider a subset Q of edges in P, constructed in the following way. Start with the first 
edge cl\ G P, whose associated region is Z{a\), and add it to the subset Q. Now, determine the 
next edge G V such that Z{a\) fl Z{a^) — 0, and add it to the subset Q. Repeat the process 
until there are no more edges in path P. By construction, it is easy to see that Q C P, and any 
two edges in Q have independent states since they satisfy d26l) . Thus, 



P{P is closed} < P{Q is closed} 

= q m , 

where m = #Q. After careful analysis of Fig. [61 we observe that the rectangle 2(a) has 
dimensions M x (M + 1) squares, where M = 2 f 2 ^] + 1. Furthermore, starting in edge a, we 
can count at most N e = 8M 2 — 1 edges (including a itself) until we reach the next element of 
Q. As a result, 

m > 



n 



n 

> — . 



and the desired upper bound becomes 

P{P is closed} < q n/Nc 



which is the result in (1241) . Since rf rcc in (1231) is guaranteed to be finite, then N s and N c are also 
finite (although possibly large). □ 
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We have just shown that, although there is dependence between the state of different edges 
of C s , the probability of a path of length n being closed decays geometrically as q n / Nc . We can 
now use a Peierls argument to study the existence of an infinite components 

Proposition 3.6 (Discrete Percolation in C' s ): If the probability q satisfies 



(27) 




then 



P{open component in C' s containing is infinite} > 0. (28) 

Proof: We start with the key observation that the open component in C' s containing 
is finite iff there is a closed circuit in C s surrounding 0. This is best seen by inspecting 
Fig. [71 where the origin is surrounded by a necklace of closed edges in C' s , which block all 
possible routes in £ s from the origin to infinity. Thus, the inequality in ([281 ) is equivalent to 
P{3 closed circuit in C s surrounding 0} < 1. Let p(n) denote the possible number of circuits 
of length n in £ s surrounding (a deterministic quantity). Let «(n) denote the number of closed 
circuits of length n in £ s surrounding (a random variable). From combinatorial arguments, it 
can be shown (521 (1.17)] that 



p{n) < 4n3 



n-2 



Then, for a fixed n, 



F{K(n) > 1} < p(n)P{path of C s with length n is closed} 

< 4n3 n "V /A \ 



14 A "Peierls argument", so-named in honour of Rudolf Peierls and his 1936 article on the Ising model 1511 , refers to an 
approach based on enumeration. For a simple example, see 1521 pp. 16-19]. 
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where we used the union bound and Proposition 13.51 Also, 

P{3 closed circuit in C s surrounding 0} = P{/t(n) > 1 for some n} 

oo 

< ^>{/c(ra) > 1} 



n=l 
oo 

< j2^ n ~ 2 Q n/Nc 

n=l 

~ 3(1 -3gViVe)2' 



(29) 



for q < (|) e - We see that if q satisfies (ITTI) . then (1291) is strictly less than one, and (1281) 
follows. □ 



We now use the propositions to finalize the proof of Lemma [3T2l whereby p s ^ ong (\e) > for 
sufficiently large (but finite) A £ . 

Proof of Lemma \3.2[ For any fixed A e , it is easy to see the probability q in (1251) can be 
made small enough to satisfy condition (ITTI) . by making the edge length d sufficiently small, 
and the density \i sufficiently large (but finite). For any such choice of parameters A^,A e ,d 
satisfying (1271) . the open component in C s containing is infinite with positive probability (by 
Proposition 13.61) . and the component /C strong (0) is also infinite with positive probability (by 
Proposition HI), i.e., p s £ on% {\i) > 0. □ 

E. Simulation Results 

In this section, we obtain additional insights about percolation in the iiS-graph via Monte 
Carlo simulation. Specifically, we aim to evaluate the percolation probabilities as a function 
of the density Xe of legitimate nodes, and thus estimate the corresponding critical densities A*. 

We now describe the simulation procedure for evaluating the percolation probabilities. We 



consider a square 1Z with dimensions \fA x y/A. The area A is adjusted according to A = 
where the average number Ni of legitimate nodes in 1Z is kept fixed. This ensures that the 
simulation time is approximately constant with respect to the parameter A^. In the simulations, 
we use Ni = 5000 nodes and A e = 1 m~ 2 . We first place II^{7?.} ~ V(\iA) legitimate nodes and 
n e {7£} ~ V(X e A) legitimate nodes inside 1Z, uniformly and independently^ The ZiS-graph G = 

We use V(n) to denote a discrete Poisson distribution with mean fi. 
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{Tle,£} is then established using as edge set 

£ = Ix^Xj : g(d(xi,Xj)) > 2 e g(d(x h e*)) + -^(2 - 1), e* = argmin d(xi, e k ) }, (30) 
L r efe en e > 

where d(-, •) is a toroidal distance metric [|53l , Il54ll ] 16 l After the ZiS-graph is established, we 
determine the various components in G, G weak , and G strong . The percolation probabilities are 
then calculated using the result in Appendix |Bj 

_ E{JV» } ^ E{N^} 

where o refers to the weak or strong component, and A^ rgest is the size of the largest component 
of the weak or strong ZiS-graph restricted to the region 1Z. The need for the approximation is 
the following: since the simulation region 1Z is finite, it is not possible to determine whether a 
node x in 1Z has an infinite component JC°(x) or not. Thus, the number of nodes in 1Z whose 
component K,°{x) is infinite is approximated by the number of nodes belonging to the largest 
component inside 1Z, similarly to [|34l . A little reflection also shows that the above approximation 
is only reasonable for the weak and strong components, but not for the out- and in-components, 
and so we consider only the first two. The expectation in (I3TT) is computed over an ensemble of 
20 spatial realizations of Hi and Il e . 

Figure [8] shows the simulated percolation probabilities for the weak and strong components of 
the iiS-graph, versus the density A^ of legitimate nodes. It considers the simplest case of q = 0, for 
which the percolation probabilities depend only on the ratio ^llZl As predicted by Theorem |3.1[ 
the weak and strong components experience phase transitions as A^ is increased. Indeed, the 
curves ^(A^) exhibit a fast increase immediately after the critical density A^ is reached. The 
reason why ^(A^) is not exactly zero for \i < A* is the approximation made in (I3TI) : even 
though there is no infinite component in such regime, there is a nonzero probability that large 
finite components arise, and these contribute to a nonzero E{A^ rgest }. Figured] suggests that 
A wcak w 3 4m -2 and A stron g _ g^m" 2 , for the case of A e = 1 m" 2 and q = 0. Operationally, this 



16 The use of the Euclidean metric \xi — Xj\ over the finite region 1Z would give rise to boundary effects, since legitimate 
nodes near the borders would be isolated with higher probability than the nodes in the middle. The toroidal distance metric, 
on the other hand, transforms the square region 1Z into a torus, and minimizes such boundary effects in the simulations. Other 
edge correction methods are discussed in I54I . 

l7 The proof of this fact is entirely analogous to the proof of I31I Property 3.1]. 
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means that if long-range bidirectional secure communication is desired in a wireless network, 
the density of legitimate nodes must be at least 6.2 times that of the eavesdroppers. In practice, 
this ratio must be even larger, because a security requirement greater than g = is typically 
requiredcl Furthermore, increasing A^ also leads to an increased average fraction of nodes p s ^ ong 
which belong to the infinite component, thus ensuring better connectivity of the network. 

Figure [9] illustrates the subcritical and supercritical phases of the iiS-graph. In Fig. |9(a)[ we 
have y = 2, and the iS-gmph exhibits only small, bounded clusters of legitimate nodes. This 
is in agreement with Fig. [8l which suggests that for a ratio of jf- = 2, all four out, in, weak, 
and strong components are subcritical. In Fig. \9(b)\ we have y = 10, and the iS-gmph exhibits 
a large cluster of connected nodes. This also agrees with Fig. [H which suggests that for a ratio 
of y — 10' ai l f° ur ou,; ' m ' weak, and strong components are supercritical. 

Figure \W\ illustrates the dependence of the percolation probability p^ ak on the secrecy rate 
threshold q. As expected, we observe that the critical density A™ eak is increasing with respect to 
q. This is because as we increase the threshold q, the requirement ^(x^Xj) > q for any two 
nodes Xi,Xj to be securely connected becomes stricter. Thus, the connectivity of the ZiS-graph 
becomes worse and a higher density of legitimate nodes is needed for percolation. 

Figure \TT\ illustrates the dependence of the percolation probability p™ cak on the wireless 
propagation effects, such as lognormal shadowing and Rayleigh fading. From the curves, we 
observe that A™ cak (lognormal) < A™ cak (Rayleigh) < A" oak (deterministic), i.e., the randomness 
of the wireless channel — as observed in realistic environments — improves long-range secure 
connectivity, by decreasing the critical density at which percolation occurs. This phenomenon 
contrasts with the behavior of local connectivity, where channel randomness does not change 
the PMF of the out-degree N out ll3TI . However, channel randomness does affect the PMF of the 
in-degree N- m , as well as the statistical dependencies between the degrees of different nodes, and 
therefore affects the properties of multi-hop connectivityO Furthermore, we conclude that by 



18 The critical densities A° (A e , q) are non-decreasing functions of A c and q, as can be shown using a coupling argument similar 
to the proof of Lemma [3~51 

"Note that in the absence of fading, the degrees of different legitimate nodes are statistically dependent, because different 
edges depend on a common underlying process il c of eavesdroppers. For example, given that a legitimate node is isolated (due 
to the proximity of an eavesdropper), then it is also likely that nearby legitimate nodes will also be isolated. By introducing 
random fading, such dependence on the underlying eavesdropper process is decreased, and multi-hop connectivity is improved. 
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assuming the absence of fading — as we do in the majority of this chapter to ensure mathematical 
tractability — we are in effect considering the most pessimistic scenario in terms of long-range 
secure connectivity. 

IV. Full Connectivity in the Poisson iS- Graph 

In the previous sections, we studied percolation in the ZiS-graph defined over the infinite plane. 
We showed that for some combinations of the parameters (A^, A e , g), the regime is supercritical 
and an infinite component arises. However, the existence of an infinite component does not 
ensure connectivity between any two nodes, e.g., one node inside the infinite component cannot 
communicate with a node outside. In this sense, percolation ensures only partial connectivity 
of the network. In some scenarios, it is of interest to guarantee full connectivity, i.e., that all 
nodes can communicate with each other, possibly through multiple hops. Note, however, that 
for networks defined over an infinite region, the probability of full connectivity is exactly zero. 
Thus, to study of full connectivity, we need to restrict our attention to a finite region 1Z. 

Throughout this section, we consider the simplest case of g = 0, i.e., the existence of secure 
links with a positive (but possibly small) MSR. Because this scenario is characterized by the 
simple geometric description in ([8]), it provides various insights that are useful in understanding 
more complex scenarios o Furthermore, the case of g = represents the most favorable scenario 
in terms of full connectivity, since a higher security requirement g leads to degraded connectivity. 

In what follows, we start by defining full connectivity in the iiS-graph. We then characterize 
the exact asymptotic behavior of full connectivity in the limit of a large density of legitimate 
nodes. Lastly, we derive simple, explicit expressions that closely approximate the probability of 
full in- and out-connectivity for a finite density of legitimate nodes, and determine the accuracy 
of such approximations using simulations. 

A. Definitions 

Since the ZiS-graph is a directed graph, we start by distinguishing between full out- and in- 
connectivity with the following definitions. 

20 Specifically, the case of q = brings the following mathematical simplifications. First, the iiS-graph is completely 
independent of channel gain function g(r), thus no assumptions about the propagation model are needed. Second, there 
exist simple (often closed-form) expressions for characterizing local connectivity 1311 which will be useful in analyzing full 
connectivity. 
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Definition 4.1 (Full Out-Connectivity): A legitimate node x, G HinlZ is fully out-connected 
with respect to a region 7?. if in the z5-graph G = {11^ £} there exists a directed path from X; 
to every node Xj G II^ fl 1Z, for Xj 7^ Xj. 

Definition 4.2 (Full In-Connectivity): A legitimate node Xi G Ii^ fl 7?. is /w//y in-connected 
with respect to a region 7£ if in the ZiS-graph G = {n^,^} there exists a directed path to x^ 
from every node x.,- eTleDTZ, for Xj 7^ x^E! 

Since the iiS-graph is a random graph, we can consider the probabilities of a node x; being 
fully out- or in-connected. For analysis purposes, we consider that probe legitimate node (node 0) 
placed at the origin of the coordinate system, i.e., x pro b e = E 1Z. We then define p ou t-con and 
Pin-con as the probability that node is, respectively, fully out- and fully in-connected. These 
probabilities are a deterministic function of the densities A^ and A e , and the area A of region 1Z. 
Our goal is to characterize p oia t-con and Pin-con- 



B. Full Connectivity: Asymptotic Regime 

In this section, we focus on the asymptotic behavior of secure connectivity as we increase 
the density of legitimate nodes. Specifically, for a fixed region of area A and a fixed density A e 
of eavesdroppers, we would like to determine if by increasing A^ — >■ 00, we can asymptotically 
achieve full in- and out-connectivity with probability oneo Note that a.s. full connectivity can 
only be achieved asymptotically, since for any finite X e , the probabilities fWt-con and Pin-con are 
strictly less than one. 

Definition 4.3 (Asymptotic Out-Connectivity): A legitimate node x G UedTZ is asymptotically 
out-connected with respect to a region 1Z with area A if lim^-).oo Pout-con = 1, for any A e > 
and A > 0. 



Note that these two definitions imply that that legitimate nodes outside the region 1Z can act as relays between legitimate 
nodes inside 7Z. Essentially, we are considering the iiS-graph defined on the infinite plane, but are only interested in the full 
connectivity of the nodes inside an observation region 71. In this paper, we will refer to this as the observation model. In the 
literature, other models for finite networks include: i) the restriction model, where the network graph is strictly limited to a finite 
square, with no nodes outside the square (e.g., 1391 ), and ii) the toroidal model, where the network graph is defined over a torus 
(e.g., f40l). The main advantage of the observation and toroidal models is their homogeneity, since they eliminate boundary 
effects associated with the restriction model, leading to mathematically more elegant results. 

22 We say that an event occurs "asymptotically almost surely" (a.a.s.) if its probability approaches one as \i — > oo. 
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Definition 4.4 (Asymptotic In-Connectivity): A legitimate node x E Hi D 1Z is asymptotically 
in-connected with respect to a region 7£ with area A if lim^-^oo Pin-con = h for any A e > and 

A > 0, 

The following theorem characterizes the asymptotic out-connectivity in the ZiS-graph. 

Theorem 4.1 (Asymptotic Out-Connectivity): For the Poisson iiS-graph with A e > and A > 
0, the legitimate node at the origin is asymptotically out-connected. 

Proof: Without loss of generality, consider that a legitimate node is placed at the origin, and 
let the region TZ be a square of size VA x \JA containing at the origin. Let us partition TZ into 
equal subsquares Si of size W ^ff^ x ^J log \ e e{Xe) , such where e{X e ) > is the smallest 
number that the total number logA ^( A< ,) of subsquares is an integero This partition is depicted 



in Fig. 1 12(a)[ A subsquare is said to be. full if it contains at least one legitimate node, and empty 
otherwise. The probability that a subsquare is full is 1 — e~ log A « +e ( A «), and the probability that 
every subsquare of TZ is full is 



log A^-s(A^) 



P <{ /\ Sih full } = (1 - e -^S^+e(X^ io g A,- e( A,) j (32) 

j=l 

where we used the fact that U e is a Poisson process. When we take the limit — > oo, it is easy 
to see that e(A^) — > and that (|32|) converges to one. In other words, the described partition of 
1Z ensures that every subsquare Si will be full a.a.s. 

Next, we analyze the secure connectivity between legitimate nodes belonging to adjacent 
subsquares of 71. Recall Fig. [6l where Si and <S 2 denote two adjacent squares. Using an argument 
analogous to Section ITH-Dll we know that if the 7 x 8-subsquare rectangle (Z(a) in the figure) is 
free of eavesdroppers, then all legitimate nodes inside <Si US2 form a single strong component!^ 
Now consider a region 1Z SC C 1Z constructed in the following way. For every possible pair of 

23 In our study of asymptotic connectivity, it is irrelevant whether we consider the observational, restriction, or toroidal model. 
The reason is that, as we shall see, full connectivity is determined by the behavior of the legitimate nodes in the vicinity of the 
eavesdroppers. Therefore, when we let \i —¥ oo, there exist enough legitimate nodes between the border of the region 1Z and 
any eavesdropper, so the border effects essentially vanish before they can affect the vicinity of the eavesdroppers (and thus, full 
connectivity). 

24 We have explicitly indicated the dependence of t on A{, and for simplicity omitted its dependence on A (which will be 
kept fixed). 

25 Note that here we are considering the case of g = 0, while the discussion in Section Ull-D 1 1 was valid for nonzero g as well. 
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adjacent subsquares (Si,Sj) in TZ, determine whether the associated rectangle Z(Si,Sj) is free 
of eavesdroppers. If so, update 7Z SC such that it now becomes 7Z SC USi U«Sj. Repeat the process 
until there are no more pairs of adjacent subsquares. With this definition, it is possible for large 
enough A^ to partition the square TZ into two regions as 

TZ = TZ SC U K e , 

where 7Z C = 71\1Z SC is simply the remaining region of 7Z after 7Z SC is constructed as above. This 



partition is shown in Fig. |12(a)[ By construction, it is easy to see that as approaches infinity 
(or, equivalently, the size of the subsquares {Si} approaches zero) the following properties hold 
a.s.: 

1) The region 7Z C can be decomposed into non-overlapping regions as 7Z C = Un=i^« ' 
where N e = il e {7?.} is the number of eavesdroppers inside 7Z, and TZe C 7Z is a square 
of size 7x7 subsquares centered at the n-th eavesdropper of 7Z. If N e = 0, then R c = 0. 

2) The origin belongs to 7Z SC . 

3) There exists a lattice path (i.e., a path composed only of horizontal and vertical segments 
inside TZ) between every two subsquares of 7Z SC , and thus all legitimate nodes inside 7Z SC 
form a single strong component. 

We thus conclude that the origin is a.a.s. out-connected to all legitimate nodes inside 7Z SC . It 
remains to determine whether it is also out-connected to all legitimate nodes inside 7Z C . For that 
purpose, we consider the behaviour of the i5-graph in the vicinity of the n-th eavesdropper of 
7Z, which we denote by e n ^ We know that a node X\ G He D TZe will be in-connected iff 
the corresponding Voronoi cell induced by the process Il e U {xt} has at least another legitimate 
node OTI . A little reflection shows that as A^ — > oo this Voronoi cell approaches the half-plane 

U{xi) = {y G JR 2 : \y - Xi\ < \y - e n \}, 

,(n) 



as depicted in Fig. |12(b)[ Now, it is easy to see that for every x\ G IT^ fl 7Z e , there is a.a.s. 
at least one legitimate node inside the region %{xi) fl 7Z SC , and thus every such node Xi has 
an in-connection from the strong component in 7Z SC . This argument holds similarly for every 

(n) 

region 7Z e ,n = 1, . . . , N e , and so we conclude that the origin is a.a.s. out-connected to all 

26 In the trivial case of zero eavesdroppers in TZ, the origin is out-connected to all legitimate nodes inside TZ, and the theorem 
follows. 
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legitimate nodes inside 1Z C , in addition to those in 1Z SC . This is the result of the theorem and the 
proof is concluded. □ 

The following theorem characterizes the asymptotic in-connectivity in the 2iS>-graph. 

Theorem 4.2 (Asymptotic In-Connectivity): For the Poisson ZiS-graph with A e > and A > 0, 
we have that 

lim Pi n - C o n < 1 - ^=(1 - e- x ' A ), (33) 

87r + 3a/3 

i.e., the legitimate node at the origin is not asymptotically in-connected. 

Proof: Consider a region 1Z with area A, where a probe legitimate node (node 0) is placed 
at the origin. Let and Yi t {lZ] and Ti^lZ] denote the number of nodes in TL £ H 1Z and Il e D 1Z, 
respectively. Consider that the event that there is at least one eavesdropper and one legitimate 
node in region TZ, as depicted in Fig. \T3[ Let xi denote the distance between a arbitrarily selected 
eavesdropper e and its closest legitimate node x\ £ 71, i.e., Xi — \ e ~ x i\- I n addition, let S be 
the set of possible locations in M 2 where a node can connect to x±, given that %\ is the closest 
legitimate node to e, i.e., 

S = {x G M. 2 : x~[x is possible A \x — e\ > xi} 

= {i 6 I 2 : \x — Xi\ < Xi A \ x — e \ > Xi} 



B Xl ( X i)\B e (x 



and is shown in Fig.[13j We now define the event E 3 = {n e {^} > 1 AU e {TZ} > lAU e {S} = 0}. 
Note that if there are no legitimate nodes inside S, then x\ is out-isolated, and the origin is not 
fully in-connected, i.e., E 3 C E 2 . As a consequence, we have that 

F{E~ 2 } > F{E 3 } 

or 

1 - Pin-con > P{n e {^} > 1 A U e {TZ} > 1 A U e {S} = 0}, 
which can be manipulated as follows 

Pin-con < i - P{n e W > i a u^n} > i a u e {S} = o} 

= 1 - (1 - e XsA ) ■ F{U e {Tl} > 1 A U e {S} = 0}, 
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where we used the fact that Tl e and Il e are independent processes. We now take limits as X e — > oo 
on both sides while keeping A e and A fixed. For the purposes of determining P{n^{7?.} > 
1 A n^{iS>} = 0}, letting X e — > oo with A fixed is equivalent to letting A — > oo with X e fixed. 
In such limiting regime of an infinite area Poisson process, the event {n^jT?.} > 1} occurs a.s., 
and liniA^oo ¥{U t {U} > 1 A U e {S} = 0} = F{Il e {S} = 0}. Then, 

lim p in _ con < 1 - (1 - e x ' A ) ■ F{Tl e {S} = 0}. (34) 

Xp — >oo 

To determine Pjil^l^} = 0}, we use two facts: 1) when conditioned on xu the area of S is 
equal to %Xi (j$ + ^ J ! an d 2) when X e — > oo, the boundary effects vanish, and the RV C — Xi 
becomes exponentially distributed with rate nXe- Then, 

F{U e {S} = 0} = E Xl {P{n,{5} = 0| X i}} 

1 



E xi | ex P l^-^xi 

J exp ( -X e ir( ( ~ + ^ J J nXi exp(-7rA*C)dC 



3 2tt 
1 V3 




Qn 



57T 



3^' 



With this result, (1341) becomes 



lim Pi n - C on < 1 



Qn 



8^ + 3^ 

which is the bound in (|33l . Thus, the legitimate node at the origin is not asymptotically in- 
connected, and the proof is concluded. □ 

The theorem has the following intuitive explanation. Consider A^ (or A) large enough that 
border effects can be ignored. Given that exactly one eavesdropper occurs inside region 1Z, there 
is a constant probability P{Il£{5} = 0} = 8n ^l^ ~ 0.62 that the legitimate node closest to 
the eavesdropper is out-isolated, and this probability does not decrease with Xi. In fact, when 
A^ increased, the area of S decreases in such a way that P{n^{5} = 0} remains constant. As a 
result, regardless of how large Xi is made, there is a constant probability of ~ 0.62 that the nearest 
node is out-isolated, and therefore a positive probability that the origin is not in-connected. 

Theorems 14.11 and 14.21 clearly show that increasing the density A^ of legitimate nodes is an 
effective way to improve the full out-connectivity, in the sense that the corresponding probability 
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approaches one. However, the probability of full in-connectivity cannot be made arbitrarily close 
to one by increasing A^. In essence, full (in or out) connectivity is determined by the behavior 
of the legitimate nodes in the vicinity of the eavesdroppers. It is more likely that a legitimate 
node in such vicinity is locally in-connected than out-connected [31, Property 3.3], which is 
reflected in the fact that the origin achieves full out-connectivity a.a.s., but not full in-connectivity. 
Operationally, this means a node can a.a.s. transmit secret messages to all the nodes in a finite 
region 1Z, but cannot a.s.s. receive secret messages from all the nodes in 1Z. 

Recall that for the study of full connectivity, we considered only the simplest scenario of 



g — 0. Using a coupling argument similar to the proof of Lemma 1331 it is easy to show that 
the probabilities p ou t-con(£?) and Pm-con(^) are decreasing functions of g. In other words, the 
case of g = represents of the most favorable scenario in terms of full connectivity. 

C. Full Connectivity: Finite Regime 

We now attempt to characterize full connectivity for a finite density of legitimate nodes. We 
start with the simple observation that if node is fully-out connected, then there are no in-isolated 
nodes in 1Z. Then, we immediately obtain an upper bound for p ou t-con as 

Pout-con < P{no in-isolated nodes in 71}. (35) 

We would like to express the right-hand side in terms of the individual in-isolation probability 
determined in OT1 eq. (13)]. In general, this is non-trivial because the in-isolation events for 
different nodes are statistically dependent. For example, if legitimate node xa is in-isolated 
and node xb is close to x\, then it is most likely that xb is also in-isolated. Full-connectivity 
has been previously studied in the case of the Poisson Boolean model for unsecured wireless 
networkso For such scenario, it has been shown in [|35l . [|55l . Il56l that as the average node 
degree vrAr^ ax becomes large, two phenomena are observed: 1) the isolation events for different 
nodes become almost independent; and 2) P{full connectivity} « P{no isolated nodes}, i.e., a 
bound analogous to (1351) becomes tight. These two facts imply that for the Poisson Boolean 
model, the P{no isolated nodes} is both a simple and accurate analytical approximation for 
P{full connectivity}, when vrAr^ ax — > oo. 

27 The Poisson Boolean model is an undirected model where each node can establish wireless links to all nodes within a fixed 
connectivity range r max , but to no other. 
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We now investigate under which conditions similar phenomena occur in the iS-gmph. For 
that purpose, we introduce the following definition: 

Pout-con = Eat tc { (1 - Pin-isol)^ } , (36) 

where Nn = Ui{TZ} is the random number of legitimate nodes inside the region 1Z (excluding 
the probe node at the origin). The quantity Pout-con represents the probability that none of the 
legitimate nodes are in-isolated, under the approximation that the in-isolation events are 
independent and have the same probability p in _ isol given in 11311 eq. (13)]. As we will show 
later, this quantity can serve as a good approximation of p ou t-con> with the advantage that it only 
depends on local characteristics (the isolation probabilities) of the iiS-graph and is analytically 
tractable. This can be shown by rewriting (l36l) as 



_ v (A^exp(-A^) 

Font— con / , , V /An— isol/ 

n=0 



f ^ A \ [^tA{\ - Pin-isol)]™ exp {—\ t A{\ - Pin-isol)) 

exp(-A^p in _i SO i) > j : 



ni 

n=0 



= exp(-AMp in _i so i) 

= exp (-A^4E{e~^ A j) , (37) 

where A is the (random) area of a typical Voronoi cell induced by a unit-density Poisson process. 
Here, we used the expression for Pm-isoi in OTl eq. (13)]. 

For the case of full in-connectivity, we can proceed in a completely analogous way to write 

Pin-con < P{no out-isolated nodes in 71}, (38) 

and 

Pin-con = Eat tc {(1 - Pout-isol)^} 

= exp(-A^p out _ iso i) 

= exp (-A^-) , (39) 



Xi + A 

where we used the expression for p ou t-isoi m ED Eq. (18)]. 
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Furthermore, according to OH Property 3.3], we know that Pi n _i SO i < p ou t-isoi for A^ > and 
A e > 0, and therefore 



As as result, in the regime where pin-con and pw-con closely approximate Pm-con and p ou t-con, 
respectively, then p ou t-con will be typically larger than p m - C(m - Intuitively, it is easier for an 
individual node to be locally in-connected than out-connected, and this fact is reflected in the 
global connectivity properties of the ZiS-graph, in the sense that is easier for the origin to be 
fully out-connected (reach all nodes) than fully in-connected (be reached by all nodes). 

D. Simulation Results 

We resort to Monte Carlo simulations to study full-connectivity in the iiS-graph, and in particu- 
lar the accuracy of the approximations introduced in the previous section. In our environment, we 
define the region K = [-5, 5] m x [-5, 5] m with area A = 100 m 2 . We place Il £ {TZ} ~ V(X e A) 
legitimate nodes and II e {7?.} ~ T J (X e A) legitimate nodes inside 1Z, uniformly and independently. 
The 2iS-graph G = {IL»,£} is then established using as edge set 



where d{-, ■) is a toroidal distance metric, similarly to Section HTl-El As discussed in Footnote I2T1 
our definitions of full connectivity imply that legitimate nodes outside the observation region 1Z 
can act as relays to connect other legitimate nodes inside 1Z. Thus, an Euclidean metric \x t —xA 
over the finite region 1Z would again give rise to boundary effects, so we use a toroidal distance 
metric to minimize such effects in the simulations. After the ZiS-graph is established, we check 
whether: (a) there are any (in or out) isolated nodes, and (b) the node at the origin is fully (in 
or out) connected. Repeating the procedure over an ensemble of 20, 000 spatial realizations of 
II^ and Il e , we calculate the various probabilities of interest. 

Figure Qj] considers full out-connectivity, comparing three different probabilities as a function 
of A e and A^: 

• the simulated P{no in-isolated nodes in 1Z}, which is an upper bound for p ou t-con as given 



Pout— con Pi 




(40) 



in d35]); 
• the analytical p Q ut 



whose expression is given in (1371) ; 
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. the simulated probability of full out-connectivity, p ou t-con- 
From the plots, we observe that the analytical curve p ut-con approximates p ou t-con surprisingly 
well for all Xi and A e , considering the strong approximations associated with Pout-con- Further- 
more, the approximation becomes tight in the extremes ranges where XiA -> oo or \ e A — > 
(i.e., Pout-con ~ 1)- This corresponds to a regime of practical interest where is desirable to 
operate the network, in the sense that secure out-connectivity is achieved with probability very 
close to one. 

Figure [T5] is analogous to Fig. O but for the case of full in-connectivity. It compares P{no 
out-isolated nodes in 1Z}, p- m - C(m , and p- m - con , as a function of A e and Xg. We observe the 
approximation of Pi n _ C on by Pi n _ C on becomes tight when X e A — > (i.e., Pi n _ CO n ~ 1), but not 
when XeA — > oo, unlike what happens for full out-connectivity. The difference in the behavior 
of Pout-con an d Pm-con as X e — > oo was described in Section HV-Bl 

In general, based on the simulations we conclude that p ut-con and for Pi n _ CO n are fairly 
good approximations for the corresponding probabilities of full connectivity, for a wide range 
of parameters. The main advantage is that p ut-con and for Pi n _ CO n only depend on the local 
characterization of the network, namely on the isolation probabilities, and thus lead to simple 
analytical expressions which can be used to infer about the global behaviour of the network. 
In particular, they are simple enough to be used in first-order dimensioning of the system, 
providing the network designer with valuable insights on how p ou t-con and p in _ CO n vary with the 
parameters Xe, A e , and A. 

V. Conclusion 

The z5-graph captures the connections that can be established with MSR exceeding a thresh- 
old q, in a large-scale networks. In [31], we characterized the local properties of the ?5-graph, 
including the degrees and MSR of a typical node with respect to its neighbours. In this paper, 
we build on that work and analyze the global properties of the iiS-graph, namely percolation 
on the infinite plane, and connectivity on a finite region. Interestingly, some local metrics such 
as the isolation probability, although quite simple to derive, are able to provide insights into the 
more complex phenomena such as global connectivity. 

We first characterized percolation of the Poisson iiS-graph on the infinite plane. We showed 
that each of the four components of the iS- graph (in, out, weak, and strong) experiences a 
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phase transition at some nontrivial critical density A* of legitimate nodes. Operationally, this is 
important because it implies that long-range communication over multiple hops is still feasible 
when a secrecy constraint is present. We proved that percolation can occur for any prescribed 



legitimate nodes is made large enough. This implies that for unbounded path loss models, 
percolation can occur for any arbitrarily large secrecy requirement g, while for bounded models 
the desired g may be too high to allow percolation. Our results also show that as long as 
g < £> max , percolation can be achieved even in cases where the eavesdroppers are arbitrarily 
dense, by making the density of legitimate nodes large enough. 

Using Monte Carlo simulations, we obtained estimates for the critical densities A*. In the case 
of g = 0, for example, we estimated that if the density of eavesdroppers is larger than roughly 
30% that of the legitimate nodes, long-range communication in the weak z5-graph is completely 
disrupted, in the sense that no infinite cluster arises. In the strong iiS-graph, we estimated this 
fraction to be about 16%. For a larger secrecy requirement g, an even more modest fraction of 
attackers is enough to disrupt the network. 

Besides considering the existence of an unbounded component on the infinite plane, we 
also analyzed the existence of a fully-connected iiS-graph on a finite region. Specifically, we 
characterized the asymptotic behavior of secure full connectivity for a large density A^ of 
legitimate nodes. In particular, we showed p ut-con approaches one as A^ — > oo, and therefore 
full out-connectivity can be improved as much as desired by deploying more legitimate nodes. 
Full in-connectivity, however, remains bounded away from one, regardless of how large A^ is 
made. Operationally, this means a node can a.a.s. transmit secret messages to all the nodes in a 
finite region 1Z, but cannot a.s.s. receive secret messages from all the nodes in 1Z. 

We derived simple expressions that closely approximate fW-con and p in ^ con for a finite 
density \i of legitimate nodes. The advantage of these approximate expressions is that they 
only depend on the local characterization of the network, namely on the isolation probabilities, 
and thus lead to simple analytical expressions which can be used to infer about the global 
behaviour of the network. In particular, our expressions show that typically p ou t-con > Pin-con, 
i.e., it is easier for a node to be fully out-connected (reach all nodes) than fully in-connected (be 
reached by all nodes). Our expressions explicitly show that this fact can be directly explained 
in terms of the local connectivity: it is easier for an individual node to be locally in-connected 



infimum secrecy rate g satisfying g < g 



max 




density of 
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than out-connected, and this is reflected in the behaviour of global connectivity described above. 
Using Monte Carlo simulations, we showed that the approximate expressions are surprisingly 
accurate for a wide range of densities Xi and A e . 

We are hopeful that further efforts in combining stochastic geometry with information-theoretic 
principles will lead to a more comprehensive treatment of wireless security. 

Appendix A 
Proof of Lemma [33] 

Proof: In what follows, we use a coupling argument. For fixed parameters A e and g, we 
begin with an 2iS-graph G(\i^) whose underlying process LL has density X^ 2 - We then thin this 
process by keeping each point of Tl e with probability ^ where A^i < A^ j2 , such that when 
a point is removed, all its in- and out-connections are also removed. Because of the thinning 
property 11461 Section 5.1], the resulting process of legitimate nodes has density A^i, and we 
have therefore obtained a valid new iiS-graph G(A^i), with the same parameters A e and g as 
before. By construction, the two graphs G(A^i) and C7(A^ 2 ) are coupled in such a way that 
£a„(°) C /C^ 2 (0). As a result, the event {|/C^ £i (0)| = oo} implies that {|/C^ 2 (0)| = oo}, and 
it follows that p^(A^i) < ?&(A 42 ). □ 

Appendix B 

Alternative Interpretation of the Percolation Probability 

We provide an alternative interpretation for the percolation probability p^, which is helpful 
to perform simulations of the percolation phenomenon. 

Proposition B.l: Let 7Z denote a square with dimensions \J~A x \/A, and denote the 
number of legitimate nodes in 1Z whose component /C°(x) is infinite, i.e., 

C = #{^n f n%: \lC{x)\ = oo}, (41) 

where o £ {out, in, weak, strong}. Then, 

rt. - -Lfi. (42) 

Proof: Consider a partition of the square 1Z into M 2 subsquares, {<Sj}^. A subsquare is 
said to be full if it contains exactly one legitimate node, and empty otherwise. Let ij be a RV 
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that has value 1 when <Sj is full with some node x for which JC°(x) is infinite, and otherwise. 
Then, we have 

E{h} = P{/, = 1} 

= ¥{Si full} • P{|£*(aO| = 0015, full} 

= ^ eXP (~^)' P{|/C<>(x)l = 00| ^ fUll} 
Defining Im — YliLi we see that Im approaches a.s. as M — > oo. Thus, we can write 

E{N^} = lim E{/ M } 

= lim M 2 E{IA 

This is the result in (1421) . and the proof is complete. □ 
The proposition suggests an alternative interpretation for the percolation probability p^: 
although it was defined as the probability that a given node x has an infinite component K,°(x), 
it also represents the average fraction of nodes in region 1Z for which the component /C°(x) is 
infinite. 
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Symbol 


Usage 


Efi 


Expectation operator 


Pfl 

^ I J 


Probability operator 


H(X) 


Entropy of X 


11/ = {:r;},IL = {e^i 

r, I <■ J " c L i J 


Poisson processes of legitimate nodes and eavesdroppers 


A^ , Ae 


Spatial densities of legitimate nodes and eavesdroppers 


I J 


Number of nodes of process 11 in region 1Z 


JVi„, iVout 


In-degree and out-degree of a node 




Ball centered at x with radius p 


T>(a, b) 


Annular region between radiuses a and 6, centered at the origin 


A{TZ} 


Area of region 1Z 


lC{x) 


Out, in, weak, or strong component of node x 


PL 


Percolation probability associated with component /C°(0) 


K 


Critical density associated with component /C°(0) 


#s 


Number of elements in the set S 




Gaussian distribution with mean fi and variance a 2 



Table I 
Notation and symbols. 



Alice Legitimate channel Bob 




Eavesdropper channel Eve 



Figure 1. Wireless wiretap channel. 
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Figure 3. Conditions for a face H in £h to be closed, according to Definition 13, II each of the 6 triangles in T-L must have at 
least one eavesdropper node each, and H must be free of eavesdroppers. 
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Figure 4. A finite open component at the origin, surrounded by a closed circuit. 




open edge in £ s 

closed edge in £ s 

open edge in C' s 

closed edge in £' s 



Figure 5. The lattice C B — d ■ Z 2 and its dual C' s = C B + (f , f )■ We declare an edge of C' a to be open iff its dual edge in 
£ s is open. 
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open edge in £ s 
closed edge in C s 



Figure 6. Conditions for an edge a in £ s to be open, according to Definition 13.21 the squares Si and S2 must have at least 
one legitimate node each, and the rectangle Z must be free of eavesdroppers. In general, the radius rf ree — and therefore the 
region Z — increase with the secrecy rate threshold g. The figure plots the case of g = 0. 



closed circuit in £ s 



r - ■ 1 



open component in C' s 



open edge in C B 

closed edge in C s 

open edge in C' s 

closed edge in 



Figure 7. A finite open component at the origin, surrounded by a closed circuit in the dual lattice. 
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Figure 8. Simulated percolation probabilities for the weak and strong components of the iiS-graph, versus the density \i 
legitimate nodes (A e = 1 m -2 , g — 0). 
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E 




x (m) 



(a) Subcritical graph (Af/A c = 2). 



E 




x (m) 



(b) Supercritical graph (A«/A e = 10). 




(c) Structure and color legend of the various 
graph components of node x = 0. 



Figure 9. Percolation in the iS-graph for g = 0. The solid lines represent the edges in c stl ' on s j while the dotted lines represent 
the edges in G wcak . 
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2 4 6 8 10 12 

A, (m- 2 ) 



Figure 10. Effect of the secrecy rate threshold g on the percolation probability p™ ak (A e — lm 2 , g(r) = -Jf, 6 = 2, 
P e /a 2 = 10). 




Figure 11. Effect of the wireless propagation characteristics on the percolation probability p^ ak (A e = lm 2 , g = 0, 
OdB = 10). 





Figure 13. Auxiliary diagram for proving that lirru f ->oo Pin-con < 1. 
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(a) Connection probabilities versus the eavesdropper density A e , for various values of X(. 




simulated gout-con | 

8.1 1 10 

(b) Connection probabilities versus the spatial density Af of legitimate nodes (A e = 
0.05 m' 2 ). 

Figure 14. Full out-connectivity in the Poisson iS-graph (A — 100 m 2 , g — 0). 
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- 1 - 1 simulated P{no out-isolated} 

simulated Pin-con 

analytical p in _ con 




0.02 0.03 

A c (m- 2 ) 

(a) Connection probabilities versus the eavesdropper density A c (\i = 1 m -2 ). 
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(b) Connection probabilities versus the spatial density Ae of legitimate nodes, for various 
values of A,. 



Figure 15. Full in-connectivity in the Poisson i<S-graph (A = 100 m , q = 0). 



